BaselineWatch
Desk

5.5 Data Breach Notification

NIST PIV and digital identity SP 800-63A-4 against SP 800-63A
All changes in this version
added 5 Subscriber Accounts part of 5

Title changed

Before · SP 800-63A

After · SP 800-63A-4

Data Breach Notification

Control changed

Before · SP 800-63A

After · SP 800-63A-4

In the event of a data breach of CSP records, the CSP SHALL provide notification to subscribers whose personal information may have been exposed to unauthorized access. Such notification SHALL include information about the breach and actions for subscribers to take to recover or maintain access to their accounts and to protect against any unauthorized disclosure of their personal information. The CSP SHALL send such notifications as expeditiously as possible to the subscribers’ validated address.